Race condition

2014-04-1115:55:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.

CPENameOperatorVersion
nessuseq5.2.1
plugin-setle201402092115 

CPE	Name	Operator	Version
	nessus	eq	5.2.1
	plugin-set	le	201402092115

References

secunia.com/advisories/57403

www.securitytracker.com/id/1029946

discussions.nessus.org/thread/7195

www.nccgroup.com/en/learning-and-research-centre/technical-advisories/nessus-authenticated-scan-local-privilege-escalation/